Privacy policy

Bingo Energy privacy policy

Bingo Energy promotion and supporting website

1. Who is responsible and how to contact us

The controller responsible for the personal information described here is Supreme Imports Ltd, registered in England and Wales under company number 05292196, whose registered office is 4 Beacon Road, Trafford Park, Manchester, M17 1AF (we, us or our). This policy covers entrants, winners, people contacting us and visitors to the supporting Bingo Energy website. It does not cover unrelated Supreme group services.

For privacy questions or to exercise your rights, write to bingo@supreme.co.uk or to the Privacy Contact, Supreme Imports Ltd, 4 Beacon Road, Trafford Park, Manchester, M17 1AF. Our data protection officer’s details, if applicable,Competition enquiries: bingo@supreme.co.uk. Effective date:

2. What information we collect and where it comes from

When you enter on Instagram, we collect your username, qualifying comment, entry time, the information needed to check the follow and like requirements, and records of the entry and draw. We obtain this from you and from the relevant Instagram post, account interactions and authorised administration tools. We do not need access to your Instagram password or unrelated private messages.

If you are selected, we may collect your name, confirmation of age and UK residence, county, contact details, account ownership evidence and claim correspondence. Where necessary, we may ask for limited evidence of identity or eligibility. We will explain what is required and avoid collecting full identity documents when a less intrusive check is sufficient.

To pay a verified winner, we collect the account holder name, sort code, account number, payment reference and payment confirmation, or the information strictly needed for an agreed alternative. We do not ask for payment card security details, banking passwords, PINs or one-time passcodes.

If you contact us, we collect the information you provide and records needed to answer your enquiry or complaint. The supporting website may generate IP address, browser, device, security and access logs. The final website’s actual providers, analytics, cookies and embedded social media or video features must be identified before this policy is published:

3. Why we use information and our lawful bases

Competition administration: we use entry, contact and eligibility information to accept entries, apply the published rules, select and contact winners and fulfil prizes. Our proposed lawful basis is performance of the promotion agreement, including necessary steps you request before entering that agreement. We collect only information necessary for those purposes.

Security and complaints: we use proportionate information to prevent manipulation, protect our services, investigate complaints and maintain evidence of a fair draw. Our proposed basis is legitimate interests in running a secure and fair promotion and resolving disputes, after assessing the effect on your rights. You may object to processing based on legitimate interests.

4. Other purposes and optional marketing

Financial records: where retention or disclosure is required by applicable tax, accounting or other law, our basis is compliance with that identified legal obligation. Evidence of an award: our proposed basis for limited winner information and regulatory evidence is legitimate interests in transparent promotion and compliance with advertising standards. Clause 9 of Part One explains your opportunity to object to public disclosure.

Optional publication of a winner’s agreed name without a fixed expiry date relies on separately recorded, freely given consent. This covers the historical winners display and posts agreed with the winner, not unrelated new uses. Consent may be withdrawn without losing the prize. We review continued publication at least annually and remove or anonymise the name when consent or purpose no longer supports it. Additional photographs, video or advertising need separately explained permission.

Electronic marketing uses a separate, specific optional choice where consent is required. Entering, following, liking or commenting does not subscribe you to emails, texts or marketing direct messages. Any sign-up identifies the sender, channel and purpose. You may withdraw marketing consent using the unsubscribe option or privacy contact without affecting entry or prizes. A minimal suppression record may be kept to respect your choice.

5. Who receives information

Access is limited to authorised staff and service providers who need it for a stated purpose. These may include the appointed promotion agency, draw administration provider, website host, IT and security providers, secure document collection service, and banks or payment providers

Processors acting for us must follow written instructions, protect information and use it only for the agreed service. Banks and other independent controllers may have their own legal duties and privacy notices. We may disclose information to professional advisers, regulators, law enforcement or courts where necessary and lawful. Group membership alone does not permit unrestricted sharing or unrelated group marketing.

We do not sell entrant information. We will not share it with third parties for their own direct marketing without a separate lawful basis and any consent required. Instagram and Meta handle your use of their platform under their own privacy information; this includes the visibility of comments you post publicly.

6. Transfers outside the United Kingdom

Some providers may process information outside the UK. Before using them, we identify the relevant countries and ensure any restricted transfer has a valid mechanism, such as applicable adequacy regulations or appropriate contractual safeguards with required assessments and additional protections. Ask our privacy contact for details or a copy of applicable safeguards, with confidential information removed where necessary.

7. How long we keep information

Proposed retention schedule for approval: identifiable unsuccessful entry records and routine draw administration records are deleted or anonymised within six months after the relevant draw’s prize is finally awarded and routine complaints are resolved. Copies of identity documents are deleted promptly after verification, normally within 30 days, unless a specific dispute or lawful requirement justifies longer retention.

Name publicity records have no fixed expiry only while the winner’s separate consent and the stated purpose remain valid, with at least annual review. Withdrawal triggers removal from our controlled public channels without undue delay; we may retain minimal consent and withdrawal evidence where needed to demonstrate compliance. This does not authorise indefinite retention of identity or banking information. Necessary private winner, award and finance evidence may be retained for up to six years after payment where justified by accounting requirements or legal claims. Remove bank details from working claim files after payment and reconciliation

8. Security and information you need to provide

We use appropriate access restrictions, secure transfer methods and administrative controls to protect information. Only verified winners should be asked for payment details, through the confirmed secure channel. No system is completely risk free. If you suspect impersonation or misuse, contact us independently using the published details.

Entry information is needed to assess your entry. A selected entrant must provide information reasonably necessary to verify eligibility and pay the prize; without it we may be unable to confirm or pay the award. Optional marketing, publicity and non-essential website tracking are not required. We do not require special category information such as health or ethnicity to enter.

9. Your data protection rights

Subject to the applicable conditions, you may request access to your personal information, correction of inaccurate information, erasure, restriction of processing and transfer of certain information in a portable format. You may object to processing based on legitimate interests, including limited winner publicity, and you have an absolute right to object to direct marketing.

Where we rely on consent, you may withdraw it at any time without affecting earlier lawful processing. Contact our privacy contact to exercise your rights. We may ask for proportionate identity verification and will normally respond within one month, subject to lawful extensions or exceptions, which we will explain. Requests are normally free.

Selecting an entry at random is not profiling. No decision producing legal or similarly significant effects is intended to be made solely by automated processing. Eligibility disputes or fraud flags will receive human review.

10. Website cookies and external services

Before launch, the website will explain the cookies and similar technologies it actually uses, including provider, purpose and duration, through []. Where consent is required for analytics, advertising or other non-essential tracking, those technologies will not run before consent. You can reject them or later change your choice without affecting competition eligibility.

External links take you to services with their own privacy policies. Social media and video embeds may transmit information to their providers; any consent-dependent embed must be blocked until the required choice is made. This policy does not assert that any particular tracker is currently installed

11. Children complaints and policy changes

The promotion is intended for adults aged 18 or over. If we learn that an ineligible child has entered, we will remove their entry and delete unnecessary information, retaining only what is proportionately needed to address a specific issue. Contact us if you believe a child’s information has been collected.

You may raise a privacy complaint with us and may complain to the Information Commissioner’s Office at https://ico.org.uk/make-a-complaint/ or on 0303 123 1113. We will not require you to give up this right. If we materially change how information is used, we will update this policy and take any additional steps required before a new use begins.